Bug 250912

Summary:	"WKWebViews should correctly indicate whether passkeys are available"
Product:	WebKit	Reporter:	Jason Lee <jlee32>
Component:	New Bugs	Assignee:	Jason Lee <jlee32>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Jason Lee

Reported 2023-01-20 12:53:55 PST

"In WKWebView, we only allow passkeys to be used if it’s in an entitled web browser or has matching associated domain. However, isUserVerifyingPlatformAuthenticatorAvailable() and isConditionalMediationAvailable() will both return true in all WKWebViews regardless of this, which is incorrect. We should make these two calls respect whether passkeys are actually available."

Attachments
Add attachment proposed patch, testcase, etc.

Jason Lee

Comment 1 2023-01-20 12:54:06 PST

<rdar://problem/104194528>

Jason Lee

Comment 2 2023-01-20 13:01:08 PST

Pull request: https://github.com/WebKit/WebKit/pull/8891

EWS

Comment 3 2023-01-23 17:06:46 PST

Committed 259253@main (0cf1f113fe36): <https://commits.webkit.org/259253@main> Reviewed commits have been landed. Closing PR #8891 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.